CVE-2013-2251

This is a detailed writeup explaining the Struts2 Prefixed Parameters OGNL Injection Vulnerability (CVE-2013-2251), including technical details, proof-of-concept URLs, and mitigation recommendations. It describes how insecure handling of prefixed parameters leads to arbitrary Java method execution.

This Metasploit module exploits CVE-2013-2251, an OGNL injection vulnerability in Apache Struts 2 DefaultActionMapper, allowing remote code execution via maliciously crafted parameters prefixed with 'action:', 'redirect:', or 'redirectAction:'.

This PoC demonstrates CVE-2013-2251, a vulnerability in Apache Struts 2 where improper parameter handling allows remote command execution. The provided code sets up a Tomcat server with a vulnerable Struts 2 action (WelcomeUserAction) to replicate the exploit scenario.

This Metasploit module exploits CVE-2013-2251 in Apache Struts 2 by injecting OGNL expressions via the DefaultActionMapper's 'redirect:' prefix, leading to remote code execution. It supports both Windows and Linux targets, downloading and executing a payload via HTTP.